On Wed, 30 May 2001 21:50:00 +0100 "Adam Langley" <[EMAIL PROTECTED]>
writes:
> On Wed, May 30, 2001 at 02:11:14PM -0500, Mathew Ryden wrote:
> > MD5 is insecure. Don't use it. SHA1 is quite secure.
>
> MD5 isn't bad, but here is the draft for the new SHA FIPS for all
> those really paranoid people out there:
>
> "NIST is proposing
> the expansion of the hash standard to include additional algorithms
>
> that produce a 256-bit, 384-bit, and 512-bit message digest."
>
> (general page) http://csrc.nist.gov/encryption/tkhash.html]
> (the draft doc) http://csrc.nist.gov/encryption/shs/dfips-180-2.pdf
>
> First person to suggest that we need 512-bit CHKs gets a slap.
>
> AGL
>
> --
> The Street finds its own uses for technology.
>
When I tried to encrypt a 500+ megabyte archive it spent a half hour just
trying to hash out the two crypto-random numbers, then it spent 10 hours
trying to encrypt the huge file and it never finished, because I canceled
the process. If it takes that long to ENCRYPT a file of that size, it
would be nearly impossible for a hacker to decrypt it without the right
password. How long it would actualy take is beyond my ability to guess,
but I'm sure that even the fastest computers would take a long time to
process the encrypted file. I have nothing against MD5 and Triple-DES,
it's just that it doesn't use the keypair functions that PGP uses so that
people can do decryption/encryption without shareing their passwords via
insecure methods.
But is Triple-DES better at encrypting useing SHA1 hash than the current
CAST algorithm?
I ask because Triple-DES does this neat thing where it Encrypts with
Rand1, Decrypts with Rand2 and Encrypts again with Rand1, makeing it
totaly freaking impossible to break the encryption. I think it is a VERY
strong encryption method.
And the bigger the file, the bigger the hash, and the longer it takes to
encrypt or decrypt the file. It takes like 5 times as long to encrypt or
decrypt an archive as it does to create and store files in it.
________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today! For your FREE software, visit:
http://dl.www.juno.com/get/tagj.
_______________________________________________
Chat mailing list
[EMAIL PROTECTED]
http://lists.freenetproject.org/mailman/listinfo/chat
